## IP Intelligence Briefing: 188.253.220.73/32
Classification: Moderate Risk | Date: 2026-07-28
Executive Summary
IP address 188.253.220.73 is classified as a moderate-risk source (risk score: 40/100) with no active threat indicators. The address is registered to AZTELEKOM-ISP (ASN 28787) in Baku, Azerbaijan. Current observations indicate the IP is firewalled with no open services. Historical data shows 11 total observations with recent blacklist activity.
Network Ownership & Registration
- ASN: 28787 (AZTELEKOM-ISP)
- Organization: Aydamir Aydamirov
- CIDR Block: 188.253.128.0/18
- BGP Prefix: 188.253.220.0/22
- Location: Baku City, Azerbaijan (40.38°N, 49.89°E)
- Registration: RIR: RIPE, allocated 2011-02-10
- Risk Scores: Provider: 0, Authority: 0, Stability: 0
Current Status
- Reputation: Moderate Risk
- Blacklist Status: Listed on 2 of 8 DNSBLs
- Open Ports: None detected
- Service Status: Firewalled / No Services
- DNSSEC: Valid
- Route Stability: Unstable (route changes detected)
Threat Indicators
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Abuse Confidence Score: Not available
- Blacklist Count: 2
- Campaign Correlation: None identified
Neighborhood Analysis
Subnet: 188.253.220.73/24
- Total Neighbors: 3
- Abuse Density: 0%
- Risk Distribution: 0 high-risk, 0 medium-risk, 2 low-risk
| Neighbor IP | Risk Score | Authority Score |
|---|---|---|
| 188.253.220.78 | N/A | N/A |
| 188.253.220.99 | 0 | 50 |
| 188.253.220.194 | 0 | 50 |
Observation History
Total Observations: 11
Most Recent: 2026-07-28 17:05:54 UTC
- DNSSEC Validation: Confirmed (2026-07-28)
- ASN Resolution: AS-AZTELEKOM (2026-07-28)
- Blacklist Activity: 2 listings confirmed (2026-07-28)
- PTR Record: None detected
Relationships
Limited relationship graph detected. Primary association is with AZTELEKOM-ISP network infrastructure.
Recommended Actions
Based on risk score 40/100, consider blocking traffic from this address. Recommended rules:
```bash
# iptables
iptables -A INPUT -s 188.253.220.73 -j DROP
# nftables
nft add rule inet filter input ip saddr 188.253.220.73 drop
# Cloudflare WAF
Expression: ip.src eq 188.253.220.73
Action: block
# AWS WAF
Addresses: 188.253.220.73/32
Description: IPDebrief risk 40
```
Intelligence Notes
- No evidence of malicious activity or known attack campaigns
- Limited network activity with services firewalled
- Neighboring IPs show low to no risk profiles
- Route instability may indicate hosting infrastructure changes
- DNSSEC validation suggests some level of infrastructure legitimacy
Recommendation: Monitor for activity changes. Current risk profile warrants conservative blocking but does not indicate active threat.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Aydamir Aydamirov |
| ASN | AS28787 |
| Network Name | AZTELEKOM-ISP |
| CIDR Block | 188.253.128.0/18 |
| RIR | RIPE |
| Country | AZ |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS28787 |
| Network Prefix | 188.253.220.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 8% | 1 | 1 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 1 |
| geolocation | 8% | 1 | 1 |
| Overall | 10% | 8 | 9 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-18 17:42:39 UTC |
| Last Seen | 2026-09-02 16:10:44 UTC |
| Profile Built | 2026-09-02 16:16:52 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 188.253.220.73
Who owns the IP address 188.253.220.73?
188.253.220.73 is registered to Aydamir Aydamirov. The address falls within the 188.253.128.0/18 network block. Registration is held at RIPE.
Where is 188.253.220.73 located?
Geolocation data places 188.253.220.73 in Baku, Baku City, AZ. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 188.253.220.73 malicious or safe?
188.253.220.73 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.